Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/f48f540ad350fe9e526f611a1db023dac06bac15.roa
File:                     f48f540ad350fe9e526f611a1db023dac06bac15.roa (raw, json)
Hash identifier:          SXIVq9GESIZfkOPkoj9DiK+4dDtEhmLshCxsq8Inb/U=
Subject key identifier:   AD:9B:CE:11:B9:FA:43:26:F6:EC:EA:F2:C2:9C:17:E9:5B:B9:40:21
Certificate issuer:       /CN=a021501bf713ce344873efb6d039b5bf1e030235
Certificate serial:       0D3EF2
Authority key identifier: 04:B8:C4:EA:F7:79:2E:CF:D6:C2:01:3D:72:7D:1C:CB:51:E0:0A:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a021501bf713ce344873efb6d039b5bf1e030235.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/f48f540ad350fe9e526f611a1db023dac06bac15.roa
Signing time:             Wed 24 Mar 2021 14:39:11 +0000
ROA not before:           Wed 24 Mar 2021 14:39:11 +0000
ROA not after:            Tue 24 Mar 2026 14:39:11 +0000
asID:                     267699
IP address blocks:        170.254.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868082 (0xd3ef2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a021501bf713ce344873efb6d039b5bf1e030235
        Validity
            Not Before: Mar 24 14:39:11 2021 GMT
            Not After : Mar 24 14:39:11 2026 GMT
        Subject: CN=f48f540ad350fe9e526f611a1db023dac06bac15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:26:1a:3f:fd:36:be:e6:b3:6c:87:ec:93:
                    9c:3e:97:8d:43:20:48:cf:ae:b6:47:09:dc:42:48:
                    66:4f:dc:f4:4e:88:33:f0:53:fb:28:cd:f3:63:fb:
                    81:6e:b8:54:49:09:80:45:46:5d:a9:0e:7d:13:d3:
                    fe:4e:fa:10:96:68:ba:1e:97:02:f3:af:c3:dd:e0:
                    5a:38:3d:2a:a1:95:39:56:c6:93:b1:16:c6:92:5c:
                    9d:66:4a:c9:90:8b:6e:90:02:ce:06:fb:2b:23:e3:
                    cf:a7:f8:6c:fa:24:89:80:97:4c:d6:e8:a8:d9:3b:
                    7a:2e:7f:99:72:ed:7f:11:99:7b:5d:5c:d7:dc:1d:
                    05:1f:2d:72:d2:aa:d9:a5:2c:a1:3b:0c:70:48:5e:
                    ec:25:b4:10:2b:45:5d:16:64:e1:96:d5:ea:50:4b:
                    ea:d1:bc:52:28:a9:df:9f:18:de:97:2e:dd:ac:7d:
                    8f:52:65:80:62:83:bb:34:a8:93:0b:1d:f8:ac:03:
                    3c:ac:fa:74:02:22:91:82:16:c9:f8:a4:34:51:db:
                    24:47:af:39:cc:59:a0:e3:86:7c:c7:d7:98:3e:f2:
                    a9:ba:11:ee:37:f4:aa:35:9d:5b:91:dc:96:27:66:
                    a8:23:20:8c:cf:d6:d6:ca:cb:c5:8d:e8:ae:ae:58:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9B:CE:11:B9:FA:43:26:F6:EC:EA:F2:C2:9C:17:E9:5B:B9:40:21
            X509v3 Authority Key Identifier:
                keyid:04:B8:C4:EA:F7:79:2E:CF:D6:C2:01:3D:72:7D:1C:CB:51:E0:0A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a021501bf713ce344873efb6d039b5bf1e030235.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/f48f540ad350fe9e526f611a1db023dac06bac15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/a021501bf713ce344873efb6d039b5bf1e030235.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:8c:a9:51:68:60:1b:27:65:af:05:7b:58:e2:7a:33:f2:9b:
         b4:b9:ec:de:8a:f9:c6:4a:81:0a:24:26:60:5f:60:8c:dc:07:
         f1:de:e8:bf:f0:6b:38:48:64:3b:5c:9b:1a:ec:76:cb:65:bb:
         73:cd:4d:9c:cc:0d:22:bb:f2:f0:c3:2f:db:d7:03:82:b5:1c:
         06:ed:b2:ca:65:7d:27:ed:af:83:db:12:c4:ed:42:60:8b:20:
         77:ad:45:fd:b7:18:d6:58:b3:a5:c7:6b:37:85:22:5f:3e:d4:
         1c:1f:ac:87:2b:57:d2:24:0c:cb:62:26:f3:88:da:14:c9:6f:
         f3:fe:6a:5e:56:8a:d6:d0:04:02:54:80:6d:57:c7:e7:fe:89:
         52:d6:24:f1:03:68:7d:78:04:43:56:da:66:05:65:68:94:dd:
         1e:63:bf:2c:6a:09:93:5f:11:e4:f9:e2:c3:0a:f2:5e:72:50:
         cd:45:dd:b4:d5:06:d0:15:18:ad:a5:62:97:c5:2c:14:f2:33:
         87:a6:39:96:3b:28:bd:24:45:de:a5:89:56:f2:a9:36:47:bf:
         07:d5:ee:81:cd:75:10:c1:77:18:45:a0:8b:b5:b2:dd:f4:c3:
         6e:a2:a7:3e:84:9c:fd:bd:06:af:6d:5a:69:35:47:fe:93:6f:
         d2:3c:1a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:24 2024 by rpki-client on console-ams.rpki-client.org